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WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 
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earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on 27 July 2007 . 
2a)D This action is FINAL. 2b)M This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-28 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claim(s) 1-28 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 !)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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a)D All b)D Some * c)D None of: 

1 Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 
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application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1. The office action is in replay to an amendment filed on 07/27/2007.Claims 1-28 are 
pending. 

Response to Arguments 

2. Applicant's arguments with respect to claim 1-28 have been considered but are moot in 
view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 1-2,5-13,16-20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over McCorkendale etal(hereinafter referred as McCorkendale) US 
Pub No 2004/0153644 A1 in view of Reise et al(hereinafter referred as Reise) US 
Patent No 6,678,625 B1 

13. As per claims 1,12: McCorkendale teaches a method/a medium of monitoring 
and verifying software on a data processing device, comprising: an auxiliary system 
monitoring the software during runtime on the computer(See 0031,0067 and Fig 7 



Application/Control Number: Page 3 

10/677,025 

Art Unit: 2136 

steps 714,716,71 8);the auxiliary system searching for a compromise to the 
software(See Fig steps 716,718); and the auxiliary system restricting access to the 
computer if the compromise is identified(See Fig 7 steps 722). 

McCorkendale does not explicitly teach auxiliary system existing independently 
of the computer processor and memory. 

However Reise teach auxiliary system existing independently of the computer 
processor and memory (See Fig 2 steps 202,204,206,208). 

Therefore it would have been obvious to one ordinary skill in the art at 
that time the invention was made to employ the teachings method of Reise within 
McCorkendale inorder to enhance security of the system. 
14. As per claims 2,1 3: the combination of McCorkendale and Reise teach the 
method wherein the software during runtime is loaded into the computer's memory (See 
McCorkendale 0035). 

17. As per claims 5,16: the combination of McCorkendale and Reise teach wherein 
restricting access to the computer further comprises: the auxiliary system alerting a 
remote system of the compromise (See See Fig steps 716,718,722 ); and the remote 
system restricting access to the computer if the compromise is identified ( See Fig 
steps 716,718 ). 

1 8. As per claims 6, 1 7: the combination of McCorkendale and Reise teach further 
comprising a remote system providing the auxiliary system with information pertaining 
to the software (See Reise Fig 2 and 7). 

18. As per claims 7,18: the combination of McCorkendale and Reise teach the 
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method according wherein providing the auxiliary system with information pertaining 
to the software further comprises providing the auxiliary system with baseline data 
for the software (See Reise col 4 lines 13-31 and Fig 2). 

1 9. As per claims 8: the combination of McCorkendale and Reise teach the method 
wherein the auxiliary system comprises a device having direct memory access ("DMA 
access") to the computer's memory (See Reise col 4 lines 52-66). 

20. As per claim 9: the combination of McCorkendale and Reise teach the method 
wherein the auxiliary system includes an intelligent network interface controller (See 
Reise Fig 2 step 216). 

21. As per claim 10,19: the combination of McCorkendale and Reise teach the 
method wherein monitoring the software further comprises monitoring configuration 
data for the software (See McCorkendale 0031 ,0037). 

22. As per claim 1 1,20: : the combination of McCorkendale and Reise teach the method 
wherein the configuration data for the software is loaded during runtime into the computer's 
memory (See McCorkendale 0035,0067). 

23. Claims 21-28 are rejected under 35 U.S.C. 103(a) over Veil (US Patent No 6,138,239) 
in view of McCorkendale et al(hereinafter referred as McCorkendale) US Pub No 
2004/0153644 Al. 

4. As per claim 21 : Veil teaches an auxiliary processing system, comprising: a 
processor (See Fig 8 step 602); a memory coupled to the processor (See Fig 8 step 
608); and a monitoring module capable of accessing the processor and the memory 
(See Fig 8 steps 612,614 and col 2 lines 54-62). 
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Veil does not explicitly teach the monitoring module further capable of 
monitoring and verifying software during runtime on a computer system. 

However McCorkendale teach the monitoring module further capable of 
monitoring and verifying software during runtime on a computer system.(See 
0031,0067 and Fig 7 steps 714,716,718). 

Therefore it would have been obvious to one ordinary skill in the art at that 
time the invention was made to employ the teachings method of McCorkendale 
within Veil inorder to protect the software against unauthorized modification. 

5. As per claim 22: the combination of Veil and McCorkendale teach the auxiliary 
processing system wherein the processor, the memory and the monitoring module 
are isolated from the computer system (See Fig 8 steps 600,612,614). 

6. As per claim 23: the combination of Veil and McCorkendale teach the auxiliary 
processing system wherein the processor, memory and monitoring module reside 
within a virtual machine on the computer system (See Fig 3 step 104). 

7. As per claim 24: the combination of Veil and McCorkendale teach the auxiliary 
processing system wherein the processor, memory and monitoring module reside on 
a separate device from the computer system (See Fig 3 step 104). 

8. As per claim 25: the combination of Veil and McCorkendale teach the auxiliary 
processing system wherein the auxiliary system is capable of being coupled to a 
remote system (See Fig 3 step 104). 

9. As per claim 26: the combination of Veil and McCorkendale teach the auxiliary 
processing system wherein the remote system is capable of providing the auxiliary 
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processing system with information pertaining to the software on the computer 
system (See Veil col 2 line 53 through col 3 line 4). 

1 0. As per claim 27: the combination of Veil and McCorkendale teach the auxiliary 
processing system according to Claim 26 wherein the remote system is further 
capable of providing the auxiliary processing system with baseline data for the 
software on the computer system (See Veil col 2 line 53 through col 3 line 12). 

11. As per claim 28: the combination of Veil and McCorkendale teach the auxiliary 
processing system wherein the remote system is further capable of providing the 
auxiliary processing system with configuration data for the software on the computer 
system (See Veil col 2 line 53 through col 3 line 4). 

23. Claims 3-4,14-15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
McCorkendale et al(hereinafter referred as McCorkendale) US Pub No 2004/0153644 Al 
in view of Reise et al(hereinafter referred as Reise) US Patent No 6,678,625 Bl and further 
in view of Nguyen et al(US Patent No 7,107,493 B2) 

24. As per claim 3,14: the combination of McCorkndale and Reise teach claim 1 and 
12 as recited above. McCorkenale and Reise do not explicitly teach the method wherein 
searching for the compromise to the software further comprises examining portions of 
the computer's memory. However Nguyen teach the method wherein searching for the 
compromise to the software further comprises examining portions of the computer's 
memory(See claim 1 lines 5-10). 

Therefore it would have been obvious to one ordinary skill in the art at that 
time the invention was made to employ the teachings method of Nguyen within 
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the combination of McCorkendale and Reise inorder to provide a security 
mechanism in a computer system to protect the software against unauthorized 
use. 

25. As per claim 4,15: the combination of McCorkendale and Reise teach claim 1 as 
recited above. McCorkendale and Reise do not explicitly teach the method wherein 
searching for the compromise to the software further comprises copying portions of the 
computer's memory into a memory on the auxiliary system to identify any compromises 
to the software. 

However Nguyen teaches searching for the compromise to the software further 
comprises copying portions of the computer's memory into a memory on the auxiliary 
system to identify any compromises to the software (See claim 1 lines 5-1 0). 

Therefore it would have been obvious to one ordinary skill in the art at that 
time the invention was made to employ the teachings method of Nguyen within 
the combination of McCorkendale and Reise inorder to provide a security 
mechanism in a computer system to protect the software against unauthorized 
use. 

Conclusion 

23. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See PTO 892. 
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Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Fikremariam Yalew whose telephone number is 5712723852. The 
examiner can normally be reached on 9-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Moazzami Nasser,can be reached on 5712738300. The fax phone number for the 
organization where this application or proceeding is assigned is 571-272-4195. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic Business Center 
(EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786-9199 (IN USA OR 
CANADA) or 571-272-1000. 
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